T401774: Redesign UI for listing 2FA methods and adding new methods added $wgOATHAuthNewUI, T402467: Allow users to enable multiple authenticator types added $wgOATHAllowMultipleModules
Both should no longer be necessary in the near future, and should be removed (defaulting those features to being always on)
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T399644 FY2025-26 WE4.6.2 Multiple Authenticators | |||
| Resolved | Reedy | T405787 Remove temporary feature flags for MW 1.45 release | |||
| Resolved | Reedy | T404806 Remove $wgOATHAllowMultipleModules and $wgOATHAuthNewUI | |||
| Resolved | Reedy | T407057 Run MoveRecoveryCodesFromTOTP.php | |||
| Resolved | Reedy | T405235 Create MediaWiki maintenance script to migrate older TOTP devices to modern TOTP + Recovery Codes configuration | |||
| Resolved | Reedy | T406953 Don't save scratch_tokens if empty array (like they are on new TOTP rows) | |||
| Resolved | Reedy | T404807 Remove $wgOATHAllowMultipleModules and $wgOATHAuthNewUI when no longer needed from CommonSettings-labs.php |
In addition, we should remove code that will be orphaned by removing these settings, including classes that will become unused like DisableForm.
Change #1195378 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/extensions/OATHAuth@master] extension.json: Default OATHAllowMultipleModules and OATHAuthNewUI to true
Change #1198150 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/extensions/WebAuthn@master] Remove usages of OATHAllowMultipleModules
Change #1198154 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/extensions/OATHAuth@master] Drop $wgOATHAllowMultipleModules and $wgOATHAuthNewUI
Change #1198150 merged by jenkins-bot:
[mediawiki/extensions/WebAuthn@master] Remove usages of OATHAllowMultipleModules
Change #1195378 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] extension.json: Default OATHAllowMultipleModules and OATHAuthNewUI to true
Change #1198180 had a related patch set uploaded (by Reedy; author: Reedy):
[operations/mediawiki-config@master] CommonSettings: Remove some OATHAuth config overrides
Change #1198154 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] Drop $wgOATHAllowMultipleModules and $wgOATHAuthNewUI
Change #1200417 had a related patch set uploaded (by Reedy; author: Reedy):
[mediawiki/extensions/OATHAuth@REL1_45] Drop $wgOATHAllowMultipleModules and $wgOATHAuthNewUI
Change #1200417 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@REL1_45] Drop $wgOATHAllowMultipleModules and $wgOATHAuthNewUI
Change #1198180 merged by jenkins-bot:
[operations/mediawiki-config@master] CommonSettings: Remove some OATHAuth config overrides
Mentioned in SAL (#wikimedia-operations) [2025-11-03T16:36:45Z] <reedy@deploy2002> Synchronized wmf-config/CommonSettings.php: T404806 (duration: 06m 27s)